PT-2009-2831 · Apple · Macos X

Published 2009-02-13 · Updated 2011-03-08 · CVE-2009-0138

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.5.6

Description The issue is related to the improper validation of authentication credentials in the servermgrd (Server Manager) component. This allows remote attackers to modify the system configuration.

Recommendations For Apple Mac OS X version 10.5.6, consider restricting access to the servermgrd component until a fix is available. As a temporary workaround, ensure that only trusted sources can access the system configuration to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2009-0138

Affected Products

Macos X

References · 7

• http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0138 · Security Note
• http://vupen.com/english/advisories/2009/0422 · Note
• http://securityfocus.com/bid/33813 · Note
• http://support.apple.com/kb/HT3438 · Note
• http://securityfocus.com/bid/33759 · Note
• http://secunia.com/advisories/33937 · Note